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Claims 

What is claimed is: 



1 1 . A method for management of network access on a per application basis, 

2 comprising: 

3 (a) selecting applications from a group of applications adapted for working in 

4 conjunction with a first application program interface to gain access to a 

5 network; 

6 (b) installing a second application program interface adapted for precluding the 

7 applications from accessing the network; and 

8 (c) wrapping the selected applications for allowing the selected applications to 

9 access the network via the second application program interface. 

1 2. The method as recited in claim 1 , wherein the selected applications are 

2 wrapped with a wrapper adapted for compressing data in a portable 

3 executable (PE) image. 

1 3 . The method as recited in claim 2, wherein the wrapper equips the 

2 compressed data with extractor code adapted for extracting the data in the PE 

3 image. 

1 4. The method as recited in claim 3, wherein the extractor code is further 

2 adapted for interfacing with the second application program interface. 

1 5. The method as recited in claim 2, wherein the wrapper is further adapted for 

2 identifying a location in memory. 

1 6. The method as recited in claim 5, wherein the location in memory is where a 

2 routine is stored for allowing the selected applications to access the network. 
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1 7. The method as recited in claim 1 , and further comprising allowing a user to 

2 select the applications to be allowed to access the network via the second 

3 application program interface. 

1 8 . A computer program product for management of network access on a per 

2 application basis, comprising: 

3 (a) computer code for selecting applications from a group of applications 

4 adapted for working in conjunction with a first application program interface 

5 to gain access to a network; 

6 (b) computer code for installing a second application program interface adapted 

7 for precluding the applications from accessing the network; and 

8 (c) computer code for wrapping the selected applications for allowing the 

9 selected applications to access the network via the second application 
1 0 program interface . 

1 9. The computer program product as recited in claim 8, wherein the selected 

2 applications are wrapped with a wrapper adapted for compressing data in a 

3 portable executable (PE) image. 

1 10. The computer program product as recited in claim 9, wherein the wrapper 

2 equips the compressed data with extractor code adapted for extracting the 

3 data in the PE image. 

1 11. The computer program product as recited in claim 10, wherein the extractor 

2 code is further adapted for interfacing with the second application program 

3 interface. 

1 12. The computer program product as recited in claim 9, wherein the wrapper is 

2 further adapted for identifying a location in memory. 
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13. The computer program product as recited in claim 12, wherein the location in 
memory is where a routine is stored for allowing the selected applications to 
access the network. 

14. The computer program product as recited in claim 8, and further comprising 
computer code for allowing a user to select the applications to be allowed to 
access the network via the second application program interface. 

15. A system for management of network access on a per application basis, 
comprising: 

(a) logic for selecting applications from a group of applications adapted for 
working in conjunction with a first application program interface to gain 
access to a network; 

(b) logic for installing a second application program interface adapted for 
precluding the applications from accessing the network; and 

(c) logic for wrapping the selected applications for allowing the selected 
applications to access the network via the second application program 
interface. 

16. The system as recited in claim 15, wherein the selected applications are 
wrapped with a wrapper adapted for compressing data in a portable 
executable (PE) image. 

17. The system as recited in claim 1 6, wherein the wrapper equips the 
compressed data with extractor code adapted for extracting the data in the PE 
image. 

18. The system as recited in claim 17, wherein the extractor code is further 
adapted for interfacing with the second application program interface. 
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1 1 9. The system as recited in claim 1 6, wherein the wrapper is further adapted for 

2 identifying a location in memory. 

1 20. The system as recited in claim 1 9, wherein the location in memory is where a 

2 routine is stored for allowing the selected applications to access the network. 

1 21. The system as recited in claim 1 5, and further comprising logic for allowing 

2 a user to select the applications to be allowed to access the network via the 

3 second application program interface. 

1 22. A system for management of network access on a per application basis, 

2 comprising: 

3 (a) means for selecting applications from a group of applications adapted for 

4 working in conjunction with a first application program interface to gain 

5 access to a network; 

6 (b) means for installing a second application program interface adapted for 

7 precluding the applications from accessing the network; and 

8 (c) means for wrapping the selected applications for allowing the selected 

9 applications to access the network via the second application program 
10 interface. 

1 23 A data structure stored in memory for management of network access on a 

2 per application basis, comprising: 

3 (a) application program interface object for precluding a plurality of applications 

4 from accessing a network; and 

5 (b) a wrapper object for wrapping selected applications for allowing the selected 

6 applications to access the network via the application program interface 

7 object. 

1 24 A method for management of network access on a per application basis, 

2 comprising: 
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3 (a) installing an application program interface adapted for precluding a plurality 

4 of applications from accessing a network; and 

5 (b) wrapping a plurality of selected applications for allowing the selected 

6 applications to access the network via the application program interface. 
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